documented OrmAuth's use of cache